173 matches found
openSUSE Security Update : mozilla-xulrunner191 (mozilla-xulrunner191-4456)
Mozilla XULRunner 1.9.1 was updated to the 1.9.1.19 security release. MFSA 2011-12: Mozilla developers identified and fixed several memory safety bugs in the browser engine used in Firefox and other Mozilla-based products. Some of these bugs showed evidence of memory corruption under certain...
Mozilla Foundation Security Advisory 2011-13
Mozilla Foundation Security Advisory 2011-13 Title: Multiple dangling pointer vulnerabilities Impact: Critical Announced: April 28, 2011 Reporter: regenrecht Products: Firefox, SeaMonkey Fixed in: Firefox 3.6.17 Firefox 3.5.19 SeaMonkey 2.0.14 Description Security researcher regenrecht reported...
[SECURITY] [DSA 2227-1] iceape security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2227-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff April 30, 2011 http://www.debian.org/security/faq -...
SeaMonkey < 2.0.14 Multiple Vulnerabilities
The installed version of SeaMonkey is earlier than 2.0.14. Such versions are potentially affected by the following security issues : - Multiple use-after-free errors exist in the handling of the object attributes 'mChannel', 'mObserverList' and 'nsTreeRange'. CVE-2011-0065, CVE-2011-0066,...
RHEL 6 : firefox (RHSA-2011:0471)
The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2011:0471 advisory. Mozilla Firefox is an open source web browser. XULRunner provides the XUL Runtime environment for Mozilla Firefox. Several flaws were found ...
Microsoft Windows TCP/IP Remote Code Execution Vulnerabilities (941644)
This host is missing a critical security update according to Microsoft Bulletin MS08-001. OpenVAS Vulnerability Test $Id: gbms08-001.nasl 5362 2017-02-20 12:46:39Z cfi $ Microsoft Windows TCP/IP Remote Code Execution Vulnerabilities 941644 Authors: Madhuri D Copyright: Copyright c 2011 Greenbone...
CVE-2010-0066
Unspecified vulnerability in the Access Manager Identity Server component in Oracle Application Server 7.0.4.3 and 10.1.4.2 allows remote attackers to affect integrity via unknown vectors...
CVE-2010-0066
CVE-2010-0066 affects Oracle Application Server’s Access Manager Identity Server. The vulnerability permits remote attackers to affect integrity via HTTP without authentication and has a CVSS v2 base score of 5.0 (medium). Affected releases are Oracle Application Server 7.0.4.3 and 10.1.4.2. The ...
Fedora Update for seamonkey FEDORA-2007-0066
The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
CVE-2009-0066
Technical details for CVE-2009-0066 are not publicly available in the provided documents; no concrete information on affected products, components, root cause, impact, or remediation is present. Monitor for updates.
Secunia Research: Lotus Notes htmsr.dll Buffer Overflows
====================================================================== Secunia Research 08/04/2008 - Lotus Notes htmsr.dll Buffer Overflows - ====================================================================== Table of Contents Affected...
CVE-2008-0066
CVE-2008-0066 covers multiple buffer overflows in htmsr.dll, the HTML speed reader used by Autonomy KeyView, implicated in IBM Lotus Notes 7.0.2/7.0.3. The flaws can be triggered by processing an HTML document containing (1) large chunks of data, (2) a long URL in the BACKGROUND attribute of a BO...
Microsoft Windows TCP/IP实现ICMP请求远程拒绝服务漏洞（MS08-001）
BUGTRAQ ID: 27139 CVECAN ID: CVE-2007-0066 Microsoft Windows是微软发布的非常流行的操作系统。 Windows内核的TCP/IP实现（tcpip.sys）中处理碎片路由器广播ICMP查询的方式实现上存在漏洞，远程攻击者可能利用此漏洞导致系统崩溃。 匿名攻击者可以通过在网络上向计算机特制的ICMP报文利用此漏洞，导致计算机停止响应和自动重新启动。但利用此漏洞所必须的ICMP路由发现协议（RDP）不是默认启用的。 Microsoft Windows XP SP2 Microsoft Windows Server 2003 SP2...
CVE-2007-0066
CVE-2007-0066 describes a denial-of-service in the Windows kernel TCP/IP/ICMP handling when Router Discovery Protocol (RDP) is enabled. The vulnerability arises from how fragmented router advertisement ICMP queries are processed, potentially causing an out-of-bounds read and system unresponsivene...
MS08-001: Vulnerabilities in Windows TCP/IP Could Allow Remote Code Execution (941644)
The remote version of Windows contains a version of the TCP/IP protocol that does not properly parse IGMPv3, MLDv2 and ICMP structure. An attacker may exploit these flaws to execute code on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid29893;...
CVE-2006-0066
CVE-2006-0066 affects PHPjournaler 1.0. The vulnerability is an SQL injection in index.php via the readold parameter, allowing remote execution of arbitrary SQL commands. Root cause appears to be unsanitized user input in the query. No remediation details are provided in the connected documents.
UnixWare ICMP Message Handling Denial of Service
Release Date: 2005-09-05 Critical: Less critical Impact: DoS Where: From remote Solution Status: Vendor Patch OS: UnixWare 7.x.x Select a product and view a complete list of all Patched/Unpatched Secunia advisories affecting it. CVE reference: CAN-2004-0790 CAN-2004-0791 CAN-2004-1060 CAN-2005-00...
CVE-2005-0066
Technical details for CVE-2005-0066 are not provided in the connected documents. Public specifics (affected products/versions, exploitation, or fixes) are not present; monitor for updates.
CVE-2005-0066
The original design of TCP does not check that the TCP Acknowledgement number in an ICMP error message generated by an intermediate router is within the range of possible values for data that has already been acknowledged aka "TCP acknowledgement number checking", which makes it easier for...
